Critical Privilege Escalation Flaws in Linux Kernel Affecting Multiple Systems

• •CVE-2025-10263 and CVE-2025-54518 allow privilege escalation on affected systems.
• •Active exploitation of these vulnerabilities has been confirmed by CISA.
• •Administrators must update and reboot systems running affected Linux kernel versions.

On September 29, 2026, multiple vulnerabilities were disclosed in the Linux kernel, specifically affecting Ubuntu 24.04 and other distributions. These vulnerabilities include CVE-2025-10263, which allows local attackers to bypass memory protections on Arm processors, and CVE-2025-54518, which affects AMD Zen 2 processors, enabling privilege escalation. The flaws could allow attackers to write to memory after permissions were revoked, potentially compromising systems. Users of affected systems, including those running Oracle Cloud and AWS, are urged to apply the patches immediately. The vulnerabilities have been confirmed by CISA, which reported active exploitation of the Linux firewall flaw. The updates require a system reboot and may necessitate recompiling third-party kernel modules. Administrators are advised to check for the latest package versions to mitigate these risks.